thales/wave

Release historycaution

This package is only 52 days old and has one release, so there is little release history to demonstrate sustained maintenance or backward-compatibility discipline.

Repo bus factorcaution

Two contributors are active, but one accounts for 87.5% of recent commits. The organization-owned repository partly compensates by allowing maintenance handoff, but concentration remains a modest risk.

Security policycaution

The repository has no published security policy, reducing transparency about vulnerability reporting and response expectations.

Version stabilitycaution

The assessed release is v0.1.0 rather than a stable major release, so its API and behavior may still change as the project matures.

Workflow auditcaution

Both workflows were analyzed with no dangerous triggers, injection findings, or audit failures. However, all four action references are unpinned, leaving the CI supply chain less reproducible.